From cdebcd5a05544dfde1b904c3fc99ce97fa68fb98 Mon Sep 17 00:00:00 2001 From: Fraser Tweedale Date: Thu, 4 Dec 2014 02:01:38 -0500 Subject: Decode challengePassword attribute as DirectoryString The PKCS #9 challengePassword attribute has DirectoryString syntax. Dogtag currently attempts only to decode it as a PrintableString, causing failures when the attribute is encoded as a UTF8String. Add method DerValue.getDirectoryString() to decode any of the valid DirectoryString encodings and update ChallengePassword to use it. https://fedorahosted.org/pki/ticket/1221 --- .../cms/src/com/netscape/cms/servlet/cert/scep/ChallengePassword.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'base/server/cms/src/com') diff --git a/base/server/cms/src/com/netscape/cms/servlet/cert/scep/ChallengePassword.java b/base/server/cms/src/com/netscape/cms/servlet/cert/scep/ChallengePassword.java index 5c7ac856f..f21abcc80 100644 --- a/base/server/cms/src/com/netscape/cms/servlet/cert/scep/ChallengePassword.java +++ b/base/server/cms/src/com/netscape/cms/servlet/cert/scep/ChallengePassword.java @@ -88,7 +88,7 @@ public class ChallengePassword implements CertAttrSet { private void construct(DerValue derVal) throws IOException { try { - cpw = derVal.getPrintableString(); + cpw = derVal.getDirectoryString(); } catch (NullPointerException e) { cpw = ""; } -- cgit